Kaspersky Update

Question

Hello, i have a server with kaspersky security center as a main console for antivirus, Our new sophos Xg 210 is blocking the updates from the kaspersky servers to the console, i created a exception for the updates but dont work. 
 Can Someone Help me?

rfcat_vk · Accepted Answer

Hi, 
 from my limited regex experience your exception looks correct. If it is being blocked by rule 0 that means no rules are seeing the request as valid. 
 You create a rule at the top of your firewall rules source LAN -> any -> destination WAN -> FQDN (Kaspersky) -> any service (until you identify which service they use). You are assuming the kasparsky.com is the update site, I suspect it is not. 
 Ian 
 
 Update investigation:- 
 https://support.kaspersky.com/13211 
 Update servers for Kaspersky Security Center 10 and Kaspersky Endpoint Security 10 have changed: 
 
 Requests to /updates/bin/kes10/* are redirected to bincdn.kaspersky-labs.com/.../ . 
 Server bincdn.kaspersky-labs.com/.../ saves data from /new/updates/bin/ . 
 
 The changes improve speed and stability of updates delivery. 
 If access to the bincdn.kaspersky-labs.com/ server is restricted in your organization's network, please add *.kaspersky-labs.com to exclusions.